Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,657 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2023-5217 ↗ | Google Chromium libvpx — Google Chromium libvpx Heap Buffer Overflow Vulnerabi... | Oct 2, 2023 | |
| High | CVE-2018-14667 ↗ | Red Hat JBoss RichFaces Framework — Red Hat JBoss RichFaces Framework Expressi... | Red Hat | Sep 28, 2023 |
| High | CVE-2023-41993 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Code Execution Vulner... | Apple | Sep 25, 2023 |
| High | CVE-2023-41992 ↗ | Apple Multiple Products — Apple Multiple Products Kernel Privilege Escalation... | Apple | Sep 25, 2023 |
| High | CVE-2023-41991 ↗ | Apple Multiple Products — Apple Multiple Products Improper Certificate Validat... | Apple | Sep 25, 2023 |
| High | CVE-2023-41179 ↗ | Trend Micro Apex One and Worry-Free Business Security — Trend Micro Apex One a... | Trend Micro | Sep 21, 2023 |
| High | CVE-2023-28434 ↗ | MinIO MinIO — MinIO Security Feature Bypass Vulnerability | MinIO | Sep 19, 2023 |
| Critical | CVE-2021-3129 ↗ | Laravel Ignition — Laravel Ignition File Upload Vulnerability | Laravel | Sep 18, 2023 |
| Critical | CVE-2017-6884 ↗ | Zyxel EMG2926 Routers — Zyxel EMG2926 Routers Command Injection Vulnerability | Zyxel | Sep 18, 2023 |
| High | CVE-2014-8361 ↗ | Realtek SDK — Realtek SDK Improper Input Validation Vulnerability | Realtek | Sep 18, 2023 |
| High | CVE-2022-22265 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Use-After-Free Vulnerability | Samsung | Sep 18, 2023 |
| High | CVE-2023-26369 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Out-of-Bounds Write Vulner... | Adobe | Sep 14, 2023 |
| High | CVE-2023-4863 ↗ | Google Chromium WebP — Google Chromium WebP Heap-Based Buffer Overflow Vulnera... | Sep 13, 2023 | |
| Critical | CVE-2023-20269 ↗ | Cisco Adaptive Security Appliance and Firepower Threat Defense — Cisco Adaptiv... | Cisco | Sep 13, 2023 |
| High | CVE-2023-35674 ↗ | Android Framework — Android Framework Privilege Escalation Vulnerability | Android | Sep 13, 2023 |
| High | CVE-2023-36802 ↗ | Microsoft Streaming Service Proxy — Microsoft Streaming Service Proxy Privileg... | Microsoft | Sep 12, 2023 |
| High | CVE-2023-36761 ↗ | Microsoft Word — Microsoft Word Information Disclosure Vulnerability | Microsoft | Sep 12, 2023 |
| High | CVE-2023-41061 ↗ | Apple iOS, iPadOS, and watchOS — Apple iOS, iPadOS, and watchOS Wallet Code Ex... | Apple | Sep 11, 2023 |
| High | CVE-2023-41064 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS ImageIO Buffer Ove... | Apple | Sep 11, 2023 |
| High | CVE-2023-33246 ↗ | Apache RocketMQ — Apache RocketMQ Command Execution Vulnerability | Apache | Sep 6, 2023 |
| High | CVE-2023-32315 ↗ | Ignite Realtime Openfire — Ignite Realtime Openfire Path Traversal Vulnerabili... | Ignite Realtime | Aug 24, 2023 |
| Critical | CVE-2023-38831 ↗ | RARLAB WinRAR — RARLAB WinRAR Code Execution Vulnerability | RARLAB | Aug 24, 2023 |
| Critical | CVE-2023-27532 ↗ | Veeam Backup & Replication — Veeam Backup & Replication Cloud Connect Missing... | Veeam | Aug 22, 2023 |
| Critical | CVE-2023-38035 ↗ | Ivanti Sentry — Ivanti Sentry Authentication Bypass Vulnerability | Ivanti | Aug 22, 2023 |
| High | CVE-2023-26359 ↗ | Adobe ColdFusion — Adobe ColdFusion Deserialization of Untrusted Data Vulnerab... | Adobe | Aug 21, 2023 |
| High | CVE-2023-24489 ↗ | Citrix Content Collaboration — Citrix Content Collaboration ShareFile Improper... | Citrix | Aug 16, 2023 |
| High | CVE-2023-38180 ↗ | Microsoft .NET Core and Visual Studio — Microsoft .NET Core and Visual Studio... | Microsoft | Aug 9, 2023 |
| High | CVE-2017-18368 ↗ | Zyxel P660HN-T1A Routers — Zyxel P660HN-T1A Routers Command Injection Vulnerab... | Zyxel | Aug 7, 2023 |
| High | CVE-2023-35081 ↗ | Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile (EPMM)... | Ivanti | Jul 31, 2023 |
| High | CVE-2023-37580 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Jul 27, 2023 |
| High | CVE-2023-38606 ↗ | Apple Multiple Products — Apple Multiple Products Kernel Unspecified Vulnerabi... | Apple | Jul 26, 2023 |
| Critical | CVE-2023-35078 ↗ | Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile Authent... | Ivanti | Jul 25, 2023 |
| High | CVE-2023-38205 ↗ | Adobe ColdFusion — Adobe ColdFusion Improper Access Control Vulnerability | Adobe | Jul 20, 2023 |
| High | CVE-2023-29298 ↗ | Adobe ColdFusion — Adobe ColdFusion Improper Access Control Vulnerability | Adobe | Jul 20, 2023 |
| Critical | CVE-2023-3519 ↗ | Citrix NetScaler ADC and NetScaler Gateway — Citrix NetScaler ADC and NetScale... | Citrix | Jul 19, 2023 |
| Critical | CVE-2023-36884 ↗ | Microsoft Windows — Microsoft Windows Search Remote Code Execution Vulnerabili... | Microsoft | Jul 17, 2023 |
| High | CVE-2023-37450 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Code Execution Vulner... | Apple | Jul 13, 2023 |
| High | CVE-2022-29303 ↗ | SolarView Compact — SolarView Compact Command Injection Vulnerability | SolarView | Jul 13, 2023 |
| Critical | CVE-2022-31199 ↗ | Netwrix Auditor — Netwrix Auditor Insecure Object Deserialization Vulnerabilit... | Netwrix | Jul 11, 2023 |
| High | CVE-2023-36874 ↗ | Microsoft Windows — Microsoft Windows Error Reporting Service Privilege Escala... | Microsoft | Jul 11, 2023 |
| High | CVE-2023-35311 ↗ | Microsoft Outlook — Microsoft Outlook Security Feature Bypass Vulnerability | Microsoft | Jul 11, 2023 |
| High | CVE-2023-32049 ↗ | Microsoft Windows — Microsoft Windows Defender SmartScreen Security Feature By... | Microsoft | Jul 11, 2023 |
| High | CVE-2023-32046 ↗ | Microsoft Windows — Microsoft Windows MSHTML Platform Privilege Escalation Vul... | Microsoft | Jul 11, 2023 |
| High | CVE-2021-29256 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Use-After... | Arm | Jul 7, 2023 |
| High | CVE-2021-25372 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Improper Boundary Check Vulner... | Samsung | Jun 29, 2023 |
| High | CVE-2021-25371 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Unspecified Vulnerability | Samsung | Jun 29, 2023 |
| High | CVE-2021-25395 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Race Condition Vulnerability | Samsung | Jun 29, 2023 |
| High | CVE-2021-25394 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Race Condition Vulnerability | Samsung | Jun 29, 2023 |
| High | CVE-2021-25489 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Improper Input Validation Vuln... | Samsung | Jun 29, 2023 |
| High | CVE-2021-25487 ↗ | Samsung Mobile Devices — Samsung Mobile Devices Out-of-Bounds Read Vulnerabili... | Samsung | Jun 29, 2023 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.